On 03/10/2016 11:59 AM, Daniel P. Berrange wrote: > As with the previous patch to qemu-nbd, the nbd-server-start > QMP command also needs to be able to specify an ACL when > enabling TLS encryption. > > First the client must create a QAuthZ object instance using > the 'object-add' command: >
> Signed-off-by: Daniel P. Berrange <berra...@redhat.com>
> ---
> +++ b/qapi/block.json
> @@ -147,6 +147,7 @@
> #
> # @addr: Address on which to listen.
> # @tls-creds: (optional) ID of the TLS credentials object. Since 2.6
> +# @tls-acl: (optional) ID of the QAuthZ authorization object. Since 2.6
> #
> # Returns: error if the server is already running.
> #
> @@ -154,7 +155,8 @@
> ##
> { 'command': 'nbd-server-start',
> 'data': { 'addr': 'SocketAddress',
> - '*tls-creds': 'str'} }
> + '*tls-creds': 'str',
> + '*tls-acl': 'str'} }
>
Interface change is deceptively simple :)
Reviewed-by: Eric Blake <ebl...@redhat.com>
--
Eric Blake eblake redhat com +1-919-301-3266
Libvirt virtualization library http://libvirt.org
signature.asc
Description: OpenPGP digital signature
